A User Centric Security Model for Tamper-Resistant Devices

C.3 Attestation Protocol
362 ISOException . throwIt ( ( short ) c h i l d L e f t ) ;
363 }
364 }
365 void protocolImplementation ( ) {}
366 void d h I n i t i a l i s a t i o n ( ) {
367 dhKey . setModulus ( ClassDH . dhModulus , ( short ) 0 ,
( short ) ClassDH . dhModulus . l e n g t h ) ;
368 }
369 void keygenerator ( ) {
370 AESKey sessionGenKey = (AESKey) KeyBuilder . buildKey
371 ( KeyBuilder .TYPE_AES_TRANSIENT_DESELECT,
372 KeyBuilder .LENGTH_AES_128, f a l s e ) ;
373 sessionGenKey . setKey ( SCCMDHGeneratedValue , ( short ) 0) ;
374 phMacGenerator . i n i t ( sessionGenKey , S i g n a t u r e .MODE_SIGN,
375 I n i t i a l i s a t i o n V e c t o r , ( short ) 0 , ( short )
376 I n i t i a l i s a t i o n V e c t o r . l e n g t h ) ;
377 byte [ ] keyGenMacData = JCSystem . makeTransientByteArray ( ( short ) 64 ,
378 JCSystem .MEMORY_TYPE_TRANSIENT_DESELECT) ;
379 short p o i n t e r = 0 ;
380 p o i n t e r = U t i l . arrayCopyNonAtomic ( this . CMRandomNumberArray ,
381 this . PTLVDataOffset , keyGenMacData , ( short ) pointer , ( short ) 16) ;
382 p o i n t e r = U t i l . arrayCopyNonAtomic ( this . SCRandomNumberArray ,
383 this . PTLVDataOffset , keyGenMacData , ( short ) pointer , ( short ) 16) ;
384 p o i n t e r = U t i l . arrayCopyNonAtomic ( SCCMDHGeneratedValue , ( short ) 16 ,
385 keyGenMacData , ( short ) pointer , ( short ) 16) ;
386 for ( short i = 4 8 ; i < 6 4 ; i ++) {
387 keyGenMacData [ i ] = ( byte ) 0x02 ;
388 }
389 phMacGenerator . s i g n ( keyGenMacData , ( short ) 0 , ( short )
390 keyGenMacData . length , SCCMDHGeneratedValue ,
( short )
391 0) ;
392 this . phCipherKey . setKey ( SCCMDHGeneratedValue , ( short ) 0) ;
393 for ( short i = 4 8 ; i < 6 4 ; i ++) {
394 keyGenMacData [ i ] = ( byte ) 0x03 ;
395 }
396 phMacGenerator . i n i t ( sessionGenKey , S i g n a t u r e .MODE_SIGN,
397 I n i t i a l i s a t i o n V e c t o r , ( short ) 0 , ( short )
398 I n i t i a l i s a t i o n V e c t o r . l e n g t h ) ;
399 phMacGenerator . s i g n ( keyGenMacData , ( short ) 0 , ( short )
400 keyGenMacData . length , SCCMDHGeneratedValue ,
( short )
401 0) ;
402 this . phMacGeneratorKey . setKey ( SCCMDHGeneratedValue , ( short ) 0) ;
403 SCCMDHGeneratedValue = null ;
404 JCSystem . r e q u e s t O b j e c t D e l e t i o n ( ) ;
405 }
406 void messageEncryption ( byte [ ] i n b u f f , short i n b u f f O f f s e t , short
407 inbuffLength ) {
408 syCipher . i n i t ( phCipherKey , Cipher .MODE_ENCRYPT, I n i t i a l i s a t i o n V e c t o r ,
409 ( short ) 0 , ( short ) I n i t i a l i s a t i o n V e c t o r . l e n g t h ) ;
280